What is a Consent Manager under the DPDP Act?
Updated 19 Sep 2026 · 4min read · Reviewed by ConsentLo's DPDP audit team
The DPDP Act creates a new kind of intermediary: the Consent Manager. It is registered with the Data Protection Board of India and lets people give, manage, review and withdraw consent across many businesses from one place.
Consent Manager vs consent management platform
A Consent Manager acts for the individual and is accountable to them. It must be registered with the Board, meet financial, technical and governance conditions, and stay neutral, without reading the personal data it carries.
A consent management platform (CMP) is software a business uses to run its own notices, consent and rights. Most businesses need a CMP whether or not their users choose a Consent Manager.
Registration
Under the DPDP Rules, 2025, registration of Consent Managers opens after an initial period following notification. Applicants must be Indian companies with sufficient net worth and meet conditions on interoperability, security and conflicts of interest.
Connecting your business
When a person uses a Consent Manager, their decisions reach you as signed consent artifacts. ConsentLo can receive these, record them in the same ledger as consent from your own website and app, and apply withdrawals across your processors.
Frequently asked questions
Is a Consent Manager mandatory for businesses?
No. Businesses must honour consent given through a registered Consent Manager, but individuals choose whether to use one.
Who can become a Consent Manager in India?
A company incorporated in India that meets the conditions in the DPDP Rules, including net worth, technical and governance requirements, and registers with the Data Protection Board.